On or about April 29, 2025, Arkansas Urology became aware of unusual activity in its email environment. Upon becoming aware, Arkansas Urology promptly began an investigation into the scope and nature of the suspicious activity and retained legal counsel and third-party forensic specialists to investigate the unusual activity.
That investigation revealed that certain information may have been viewed by an unauthorized individual as part of the event. This activity occurred between March 25, 2025, to April 29, 2025. Arkansas Urology then began a comprehensive review of the data set to determine what sensitive and/or personal information was impacted and to whom it was related. On June 9, 2025, Arkansas Urology finished its review of the impacted information.
The personal information involved varies by individual. Information potentially impacted may be name, social security number, date of birth, dates of service, address, driver’s license number, prescription information, diagnosis, insurance information and medical information. Nevertheless, data elements impacted by this event may vary by individual and not all data elements were impacted by every individual.
Upon learning of this event, Arkansas Urology moved quickly to investigate and respond to the event. As part of its ongoing commitment to the security of information, Arkansas Urology is reviewing and enhancing its existing policies and procedures related to data privacy to reduce the likelihood of a similar future event.